fix(selfhost): make hard guardrails authoritative

[JSONbored]

Summary

• remove legacy focus-manifest blockedPaths as an active manual-review mechanism
• make settings.hardGuardrailGlobs the single authoritative path-based hold control
• update prediction, MCP, API schema, dashboard copy, docs, config linting, and regression tests so old blockedPaths input is ignored instead of creating manual holds

Why

The review engine had two path-hold systems: legacy focus-manifest blockedPaths and modern hard guardrails. That drift made repo behavior hard to reason about and caused broad manual-review holds even when operators intended to use only hardGuardrailGlobs.

Validation

• git diff --check
• npm run typecheck
• npm run ui:openapi
• npm run ui:openapi:check
• npx vitest run test/unit/focus-manifest.test.ts test/unit/gittensory-focus-manifest.test.ts test/unit/gate-check-policy.test.ts test/unit/predicted-gate.test.ts test/unit/mcp-predict-gate.test.ts test/unit/public-safe-manifest-finding.test.ts test/unit/parity-wire.test.ts test/unit/selfhost-config-lint.test.ts test/integration/api.test.ts test/unit/routes-focus-manifest.test.ts test/unit/focus-manifest-loader.test.ts test/unit/local-branch.test.ts test/unit/pr-body-draft.test.ts test/unit/unified-comment.test.ts test/unit/decision-pack.test.ts test/unit/miner-dashboard-recommendations.test.ts test/unit/repo-policy-readiness.test.ts test/unit/routes-remediation-plan.test.ts test/unit/contributor-issue-draft.test.ts test/unit/policy-sanitizer.test.ts test/unit/queue.test.ts
• npx vitest run test/unit/focus-manifest.test.ts test/unit/gate-check-policy.test.ts test/unit/predicted-gate.test.ts test/unit/mcp-predict-gate.test.ts test/unit/local-branch.test.ts test/unit/queue.test.ts
• npx vitest run test/unit/smoke-selfhost-script.test.ts

Notes

• A full npm run test:coverage run completed the suite body with 413 passed test files, 8,232 passed tests, and coverage above project thresholds, but a local parallel run hit an unrelated test/unit/smoke-selfhost-script.test.ts output race; that smoke test passes in isolation.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	5d4b7b1	Commit Preview URL Branch Preview URL	Jul 04 2026, 08:24 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.05%. Comparing base (b5c9145) to head (5d4b7b1).
⚠️ Report is 4 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2974      +/-   ##
==========================================
- Coverage   96.06%   96.05%   -0.02%     
==========================================
  Files         259      259              
  Lines       28665    28638      -27     
  Branches    10433    10419      -14     
==========================================
- Hits        27538    27508      -30     
- Misses        490      493       +3     
  Partials      637      637              

Files with missing lines	Coverage Δ
src/config/gittensory-repo-focus-manifest.ts	100.00% <ø> (ø)
src/openapi/schemas.ts	100.00% <ø> (ø)
src/queue/processors.ts	92.74% <ø> (-0.05%)	⬇️
src/review/parity-wire.ts	96.29% <ø> (ø)
src/rules/advisory.ts	97.25% <100.00%> (-0.09%)	⬇️
src/rules/predicted-gate.ts	96.87% <100.00%> (-3.13%)	⬇️
src/selfhost/config-lint.ts	100.00% <100.00%> (ø)
src/services/contributor-issue-draft.ts	97.48% <ø> (ø)
src/services/decision-pack.ts	97.30% <ø> (-0.02%)	⬇️
src/services/miner-dashboard-recommendations.ts	100.00% <100.00%> (ø)
... and 4 more

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[loopover-orb]

Important

🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪

🔍 Gittensory is reviewing…

AI analysis is in progress. This comment will update when the review is complete.

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed · 🟪 Reviewing}